#!/usr/bin/PodMan

# ____ ____ ___ ____ ______ __

# / __ \____ ____/ / |/ /___ _____ / __ \/ ___/ |/ /

# / /_/ / __ \/ __ / /|_/ / __ `/ __ \/ / / /\__ \| /

# / ____/ /_/ / /_/ / / / / /_/ / / / / /_/ /___/ / |

# /_/ \____/\__,_/_/ /_/\__,_/_/ /_/\____//____/_/|_| :NAKED

#

# Title: PodMan-OSX (Mac on PodMan)

# Author: bphd https://twitter.com/bphd

# Version: 6.0

# License: GPLv3+

# Repository: https://github.com/bphd/PodMan-OSX

# Website: https://bphd

#

# This image won't run unless you supply a disk image using:

# -v ${PWD}/mac_hdd_ng.img:/image

#

# Take screenshots in the Arch container and display in terminal: scrotcat

#

# Build:

#

# PodMan build -t PodMan-osx:naked -f PodManfile.naked .

#

# Run headless:

#

# PodMan run -it --device /dev/kvm -p 50922:10022 -v ${PWD}/mac_hdd_ng.img:/image PodMan-osx:naked

#

# Run with display:

#

# PodMan run -it --device /dev/kvm -p 50922:10022 -v ${PWD}/mac_hdd_ng.img:/image -e "DISPLAY=${DISPLAY:-:0.0}" -v /tmp/.X11-unix:/tmp/.X11-unix PodMan-osx:naked

#

FROM bphd/PodMan-osx:latest

LABEL maintainer='https://twitter.com/bphd <https://bphd>'

USER root

WORKDIR /root

RUN rm -f /home/arch/OSX-KVM/mac_hdd_ng.img

# OPTIONAL: Arch Linux server mirrors for super fast builds

# set RANKMIRRORS to any value other that nothing, e.g. -e RANKMIRRORS=true

RUN perl -i -p -e s/^\#Color/Color$'\n'ParallelDownloads\ =\ 30/g /etc/pacman.conf

ARG RANKMIRRORS

ARG MIRROR_COUNTRY=US

ARG MIRROR_COUNT=10

RUN tee /etc/pacman.d/mirrorlist <<< 'Server = https://geo.mirror.pkgbuild.com/$repo/os/$arch' \

&& tee -a /etc/pacman.d/mirrorlist <<< 'Server = http://mirror.rackspace.com/archlinux/$repo/os/$arch' \

&& tee -a /etc/pacman.d/mirrorlist <<< 'Server = https://mirror.rackspace.com/archlinux/$repo/os/$arch'

# Fixes issue with invalid GPG keys: update the archlinux-keyring package to get the latest keys, then remove and regenerate gnupg keys

RUN pacman -Sy archlinux-keyring --noconfirm \

&& rm -rf /etc/pacman.d/gnupg \

&& pacman-key --init \

&& pacman-key --populate archlinux

RUN if [[ "${RANKMIRRORS}" ]]; then \

{ pacman -Sy wget --noconfirm || pacman -Syu wget --noconfirm ; } \

; wget -O ./rankmirrors "https://raw.githubusercontent.com/bphd/PodMan-OSX/${BRANCH:=master}/rankmirrors" \

; wget -O- "https://www.archlinux.org/mirrorlist/?country=${MIRROR_COUNTRY:-US}&protocol=https&use_mirror_status=on" \

| sed -e 's/^#Server/Server/' -e '/^#/d' \

| head -n "$((${MIRROR_COUNT:-10}+1))" \

| bash ./rankmirrors --verbose --max-time 5 - > /etc/pacman.d/mirrorlist \

&& cat /etc/pacman.d/mirrorlist \

; fi

RUN tee -a /etc/pacman.d/gnupg/gpg.conf <<< 'keyserver hkp://keyserver.ubuntu.com' \

&& tee -a /etc/pacman.d/gnupg/gpg.conf <<< 'keyserver hkps://hkps.pool.sks-keyservers.net:443' \

&& tee -a /etc/pacman.d/gnupg/gpg.conf <<< 'keyserver hkp://pgp.mit.edu:11371' \

&& tee -a /etc/pacman.d/gnupg/gpg.conf <<< 'keyserver hkps://keys.openpgp.org' \

&& tee -a /etc/pacman.d/gnupg/gpg.conf <<< 'keyserver hkps://keys.mailvelope.com'

# For taking screenshots of the Xfvb screen, useful during development.

ARG SCROT

RUN pacman -Syu xorg-server-xvfb wget xterm xorg-xhost xorg-xrandr sshpass --noconfirm \

&& if [[ "${SCROT}" ]]; then \

pacman -Syu scrot base-devel --noconfirm \

&& git clone --recurse-submodules --depth 1 https://github.com/stolk/imcat.git \

&& cd imcat \

&& make \

&& sudo cp imcat /usr/bin/imcat \

&& touch /usr/bin/scrotcat \

&& tee -a /usr/bin/scrotcat <<< '/usr/bin/imcat <(scrot -o /dev/stdout)' \

&& chmod +x /usr/bin/scrotcat \

; else \

touch /usr/bin/scrotcat \

&& echo echo >> /usr/bin/scrotcat \

&& chmod +x /usr/bin/scrotcat \

; fi \

; yes | pacman -Scc

USER arch

ENV USER arch

WORKDIR /home/arch/OSX-KVM

RUN mkdir -p ~/.ssh \

&& touch ~/.ssh/authorized_keys \

&& touch ~/.ssh/config \

&& chmod 700 ~/.ssh \

&& chmod 600 ~/.ssh/config \

&& chmod 600 ~/.ssh/authorized_keys \

&& tee -a ~/.ssh/config <<< 'Host *' \

&& tee -a ~/.ssh/config <<< ' StrictHostKeyChecking no' \

&& tee -a ~/.ssh/config <<< ' UserKnownHostsFile=/dev/null'

####

# symlink the old directory, for redundancy

RUN ln -s /home/arch/OSX-KVM/OpenCore /home/arch/OSX-KVM/OpenCore-Catalina || true

####

#### SPECIAL RUNTIME ARGUMENTS BELOW

ENV ADDITIONAL_PORTS=

# add additional QEMU boot arguments

ENV BOOT_ARGS=

ENV BOOTDISK=

# edit the CPU that is beign emulated

ENV CPU=Penryn

ENV DISPLAY=:99

ENV HEADLESS=false

ENV ENV=/env

# Boolean for generating a bootdisk with new random serials.

ENV GENERATE_UNIQUE=false

# Boolean for generating a bootdisk with specific serials.

ENV GENERATE_SPECIFIC=false

ENV IMAGE_PATH=/image

ENV IMAGE_FORMAT=qcow2

ENV KVM='accel=kvm:tcg'

# ENV MASTER_PLIST_URL="https://raw.githubusercontent.com/bphd/osx-serial-generator/master/config-custom.plist"

# ENV NETWORKING=e1000-82545em

ENV NETWORKING=vmxnet3

ENV NOPICKER=true

# dynamic RAM options for runtime

ENV RAM=3

# ENV RAM=max

# ENV RAM=half

# The x and y coordinates for resolution.

# Must be used with either -e GENERATE_UNIQUE=true or -e GENERATE_SPECIFIC=true.

ENV WIDTH=1920

ENV HEIGHT=1080

# libguestfs verbose

ENV LIBGUESTFS_DEBUG=1

ENV LIBGUESTFS_TRACE=1

CMD sudo touch /dev/kvm /dev/snd "${IMAGE_PATH}" "${BOOTDISK}" "${ENV}" 2>/dev/null || true \

; sudo chown -R $(id -u):$(id -g) /dev/kvm /dev/snd "${IMAGE_PATH}" "${BOOTDISK}" "${ENV}" 2>/dev/null || true \

; { [[ "${DISPLAY}" = ':99' ]] || [[ "${HEADLESS}" == true ]] ; } && { \

nohup Xvfb :99 -screen 0 1920x1080x16 \

& until [[ "$(xrandr --query 2>/dev/null)" ]]; do sleep 1 ; done \

; } \

; [[ "${NOPICKER}" == true ]] && { \

sed -i '/^.*InstallMedia.*/d' Launch.sh \

&& export BOOTDISK="${BOOTDISK:=/home/arch/OSX-KVM/OpenCore/OpenCore-nopicker.qcow2}" \

; } \

|| export BOOTDISK="${BOOTDISK:=/home/arch/OSX-KVM/OpenCore/OpenCore.qcow2}" \

; [[ "${GENERATE_UNIQUE}" == true ]] && { \

./PodMan-OSX/osx-serial-generator/generate-unique-machine-values.sh \

--master-plist-url="${MASTER_PLIST_URL}" \

--count 1 \

--tsv ./serial.tsv \

--bootdisks \

--width "${WIDTH:-1920}" \

--height "${HEIGHT:-1080}" \

--output-bootdisk "${BOOTDISK:=/home/arch/OSX-KVM/OpenCore/OpenCore.qcow2}" \

--output-env "${ENV:=/env}" \

|| exit 1 ; } \

; [[ "${GENERATE_SPECIFIC}" == true ]] && { \

source "${ENV:=/env}" 2>/dev/null \

; ./PodMan-OSX/osx-serial-generator/generate-specific-bootdisk.sh \

--master-plist-url="${MASTER_PLIST_URL}" \

--model "${DEVICE_MODEL}" \

--serial "${SERIAL}" \

--board-serial "${BOARD_SERIAL}" \

--uuid "${UUID}" \

--mac-address "${MAC_ADDRESS}" \

--width "${WIDTH:-1920}" \

--height "${HEIGHT:-1080}" \

--output-bootdisk "${BOOTDISK:=/home/arch/OSX-KVM/OpenCore/OpenCore.qcow2}" \

|| exit 1 ; } \

; ./enable-ssh.sh && /bin/bash -c ./Launch.sh